Malware-Infected Devices Sold Through Major Retailers

Cybersecurity firm Human Security uncovered a scheme using Triada malware to backdoor off-brand Android devices, which were then sold by major retailers. The scheme, called BADBOX, infected over 74,000 mobile phones, tablets, and connected TV boxes, with the power to steal personal information and conduct fraudulent activities. 80% of devices purchased online were reportedly infected with BADBOX, showing the breadth of its spread. Additionally, Human Security found an ad fraud module within BADBOX and a standalone fraud operation, PEACHPIT.